Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1115 Security Engineers770 Compliance Teams229 DevOps Leaders65 Developers31 CISOs17 IT Directors2

Topics:All1115 Incident716 General194 Standards88 Research61 Guides36 Deadlines13 Vendor News4 Legal2

1115 articlesSort byNewest·Trending

How a Compromised AI Tool Gave Attackers Full Access to Vercel's Infrastructure

Incident

Latest

5 min read

How a Compromised AI Tool Gave Attackers Full Access to Vercel's Infrastructure

What Happened On December 20, 2024, Vercel discovered unauthorized access to their internal systems through a compromised OAuth token belonging to Context.ai, a third-party AI coding assistant integra

For Compliance TeamsRead article

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

Incident

4 min read

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

What Happened On April 22, 2025, attackers published a malicious version of the Bitwarden CLI password manager (version 2026.4.0) to the npm registry. The compromised package was available for about 1

For Security EngineersRead

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

Incident

4 min read

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

What Happened A critical remote code execution vulnerability (CVE-2026-1731) in Bomgar s remote monitoring and management (RMM) platform has exposed organizations to significant risk. This flaw allowe

For Compliance TeamsRead

Should You Pin, Verify, or Isolate Your Developer Tools?

Standards

5 min read

Should You Pin, Verify, or Isolate Your Developer Tools?

When Socket alerted on malicious Docker images in the official checkmarx/kics repository—including a new tag v2.1.21—and compromised VS Code extensions (checkmarx/ [email protected] and 1.19.0), se

For Compliance TeamsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

Incident

4 min read

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

What Happened The CanisterSprawl malware campaign compromised npm packages to steal sensitive data from developer machines, such as tokens and API keys. It then used these credentials to publish more

For DevelopersRead

AI Found 10,000 Vulnerabilities in Your Code. Now What?

Standards

4 min read

AI Found 10,000 Vulnerabilities in Your Code. Now What?

Scope - What This Guide Covers This guide addresses the operational gap between discovering vulnerabilities and fixing them in environments where AI-assisted scanning is common. You ll find frameworks

For CISOsRead

Standards

Malicious npm Package Impersonates Bitwarden CLI: Three Attack Vectors in One

On April 23, 2026, Mend.io discovered a compromised package on npm masquerading as @bitwarden/cli version 2026.4.0. This package combined three attack mechanisms: a self-propagating npm worm, a GitHub

For Security EngineersRead

Incident

Stolen Publishing Tokens: How CanisterSprawl Turned npm Maintainers Into Attack Vectors

What Happened In late 2024, security researchers at StepSecurity and Socket disclosed CanisterSprawl, an npm malware campaign that exploits developer environments to steal credentials and publish mali

For Security EngineersRead

Standards

How Should You Authorize Your AI Agents?

Your team just deployed an AI agent to automate incident response. It needs to query your SIEM, update tickets, and potentially disable compromised accounts. The question you re facing: how do you gra

For Compliance TeamsRead

Incident

340 GB Stolen Through a Compromised Security Scanner

What Happened On March 24, the European Commission s Security Operations Center detected unauthorized access to their AWS cloud infrastructure. The attacker, ShinyHunters, had compromised a version of

For Compliance TeamsRead

Incident

766 Next.js Hosts Compromised Through CVE-2025-55182

What Happened Threat cluster UAT-10608 exploited CVE-2025-55182 , a critical vulnerability in Next.js applications, compromising at least 766 hosts. The attackers used an automated credential harvesti

For Compliance TeamsRead

Guides

"Our dependency got compromised—what do we actually do?"

Understanding the Problem In recent weeks, I ve been involved in several incident channels where teams discovered issues in their software supply chain. One team found API keys in a contractor s publi

For Compliance TeamsRead

Incident

Axios npm Breach: 100 Million Weekly Downloads Compromised in Three Hours

What Happened Between November 2024 and early 2025, threat actors linked to North Korean operations (tracked as UNC1069 and TeamPCP) compromised the Axios npm package —a JavaScript HTTP client library

For Compliance TeamsRead

Incident

Claude Found RCE Bugs in Vim and Emacs That Fire When You Open a File

What Happened An AI assistant discovered remote code execution (RCE) vulnerabilities in two widely-used text editors: Vim and GNU Emacs. These vulnerabilities do not require complex exploits or user i

For Security EngineersRead

Incident

350 GB Stolen Through a Vulnerability Scanner: The Europa.eu Supply Chain Breach

What Happened CERT-EU confirmed that 350 GB of data was stolen from Europa.eu, the European Commission s web platform. The stolen data included personal names, email addresses, and internal messages f

For Compliance TeamsRead

Incident

North Korean Hackers Compromised Axios npm Packages for Under Three Hours

What Happened For a brief period, attackers published backdoored versions of Axios to npm . Axios is an HTTP client library downloaded millions of times weekly. The malicious packages contained code t

For Compliance TeamsRead

Showing 897-912 of 1115 articles

PreviousPage 57 of 70Next